{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:BA2ZGULMZ5PTIZ7BHSQCWOQLEJ","short_pith_number":"pith:BA2ZGULM","canonical_record":{"source":{"id":"2301.12046","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-01-28T01:50:35Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"2ac40907f558a5f8f199face652abc57db4e9c1d7878b2ff3765302d71f03208","abstract_canon_sha256":"84db3ff1911321d790a8fae6bedf3956a2e3acd47de80dc430c113eea15a4693"},"schema_version":"1.0"},"canonical_sha256":"083593516ccf5f3467e13ca02b3a0b224568575131884c5be68dfa761a08bdf0","source":{"kind":"arxiv","id":"2301.12046","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.12046","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"arxiv_version","alias_value":"2301.12046v1","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.12046","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"pith_short_12","alias_value":"BA2ZGULMZ5PT","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"pith_short_16","alias_value":"BA2ZGULMZ5PTIZ7B","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"pith_short_8","alias_value":"BA2ZGULM","created_at":"2026-07-05T05:36:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:BA2ZGULMZ5PTIZ7BHSQCWOQLEJ","target":"record","payload":{"canonical_record":{"source":{"id":"2301.12046","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-01-28T01:50:35Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"2ac40907f558a5f8f199face652abc57db4e9c1d7878b2ff3765302d71f03208","abstract_canon_sha256":"84db3ff1911321d790a8fae6bedf3956a2e3acd47de80dc430c113eea15a4693"},"schema_version":"1.0"},"canonical_sha256":"083593516ccf5f3467e13ca02b3a0b224568575131884c5be68dfa761a08bdf0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:36:34.609953Z","signature_b64":"hOtJGoYoZXH/Aw5kjmkPQ6cy8b4AulZwlVFNazuvZEftiidDCfGjx3Gt9BVKpY5fvFBSxKI3GHRji9+3gJOiAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"083593516ccf5f3467e13ca02b3a0b224568575131884c5be68dfa761a08bdf0","last_reissued_at":"2026-07-05T05:36:34.609446Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:36:34.609446Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2301.12046","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:36:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4sUFfZvLKMsA43vnY+OvDFCbGkzK5LT9CsQ++c28EWOtUvsTd+di6E/ZcgtBCgxcYR78jReUwSNdeXVdb+o6CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T13:46:52.915358Z"},"content_sha256":"20e85ec79d3aead096b95d8c04a76b4444d7e0ec6712b016f3c3f60edef487db","schema_version":"1.0","event_id":"sha256:20e85ec79d3aead096b95d8c04a76b4444d7e0ec6712b016f3c3f60edef487db"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:BA2ZGULMZ5PTIZ7BHSQCWOQLEJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Semantic Adversarial Attacks on Face Recognition through Significant Attributes","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Kun He, Yasmeen M. Khedr, Yifeng Xiong","submitted_at":"2023-01-28T01:50:35Z","abstract_excerpt":"Face recognition is known to be vulnerable to adversarial face images. Existing works craft face adversarial images by indiscriminately changing a single attribute without being aware of the intrinsic attributes of the images. To this end, we propose a new Semantic Adversarial Attack called SAA-StarGAN that tampers with the significant facial attributes for each image. We predict the most significant attributes by applying the cosine similarity or probability score. The probability score method is based on training a Face Verification model for an attribute prediction task to obtain a class pr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.12046","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.12046/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:36:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wO6PTPiTbcadg/U0jAwjWHm8fpU07AkLuNB5sdKO6XuhLJoGRw+LhVhq8FFniJX3qYaYTc44KG9UGGX1bcqrAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-31T13:46:52.915928Z"},"content_sha256":"ae6f999af7302154bcba9938368d13286582f028609d6f1454d53073bde6d348","schema_version":"1.0","event_id":"sha256:ae6f999af7302154bcba9938368d13286582f028609d6f1454d53073bde6d348"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BA2ZGULMZ5PTIZ7BHSQCWOQLEJ/bundle.json","state_url":"https://pith.science/pith/BA2ZGULMZ5PTIZ7BHSQCWOQLEJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BA2ZGULMZ5PTIZ7BHSQCWOQLEJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-31T13:46:52Z","links":{"resolver":"https://pith.science/pith/BA2ZGULMZ5PTIZ7BHSQCWOQLEJ","bundle":"https://pith.science/pith/BA2ZGULMZ5PTIZ7BHSQCWOQLEJ/bundle.json","state":"https://pith.science/pith/BA2ZGULMZ5PTIZ7BHSQCWOQLEJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BA2ZGULMZ5PTIZ7BHSQCWOQLEJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:BA2ZGULMZ5PTIZ7BHSQCWOQLEJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"84db3ff1911321d790a8fae6bedf3956a2e3acd47de80dc430c113eea15a4693","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-01-28T01:50:35Z","title_canon_sha256":"2ac40907f558a5f8f199face652abc57db4e9c1d7878b2ff3765302d71f03208"},"schema_version":"1.0","source":{"id":"2301.12046","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.12046","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"arxiv_version","alias_value":"2301.12046v1","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.12046","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"pith_short_12","alias_value":"BA2ZGULMZ5PT","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"pith_short_16","alias_value":"BA2ZGULMZ5PTIZ7B","created_at":"2026-07-05T05:36:34Z"},{"alias_kind":"pith_short_8","alias_value":"BA2ZGULM","created_at":"2026-07-05T05:36:34Z"}],"graph_snapshots":[{"event_id":"sha256:ae6f999af7302154bcba9938368d13286582f028609d6f1454d53073bde6d348","target":"graph","created_at":"2026-07-05T05:36:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.12046/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Face recognition is known to be vulnerable to adversarial face images. Existing works craft face adversarial images by indiscriminately changing a single attribute without being aware of the intrinsic attributes of the images. To this end, we propose a new Semantic Adversarial Attack called SAA-StarGAN that tampers with the significant facial attributes for each image. We predict the most significant attributes by applying the cosine similarity or probability score. The probability score method is based on training a Face Verification model for an attribute prediction task to obtain a class pr","authors_text":"Kun He, Yasmeen M. Khedr, Yifeng Xiong","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-01-28T01:50:35Z","title":"Semantic Adversarial Attacks on Face Recognition through Significant Attributes"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.12046","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:20e85ec79d3aead096b95d8c04a76b4444d7e0ec6712b016f3c3f60edef487db","target":"record","created_at":"2026-07-05T05:36:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"84db3ff1911321d790a8fae6bedf3956a2e3acd47de80dc430c113eea15a4693","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-01-28T01:50:35Z","title_canon_sha256":"2ac40907f558a5f8f199face652abc57db4e9c1d7878b2ff3765302d71f03208"},"schema_version":"1.0","source":{"id":"2301.12046","kind":"arxiv","version":1}},"canonical_sha256":"083593516ccf5f3467e13ca02b3a0b224568575131884c5be68dfa761a08bdf0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"083593516ccf5f3467e13ca02b3a0b224568575131884c5be68dfa761a08bdf0","first_computed_at":"2026-07-05T05:36:34.609446Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:36:34.609446Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hOtJGoYoZXH/Aw5kjmkPQ6cy8b4AulZwlVFNazuvZEftiidDCfGjx3Gt9BVKpY5fvFBSxKI3GHRji9+3gJOiAw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:36:34.609953Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.12046","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:20e85ec79d3aead096b95d8c04a76b4444d7e0ec6712b016f3c3f60edef487db","sha256:ae6f999af7302154bcba9938368d13286582f028609d6f1454d53073bde6d348"],"state_sha256":"8ab94ba11d09fff8b55b4c0f4e1a87cf1f0f4c334e9cb2ad7b0ee2d49c9925d8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fyVU+1Rj4yhlme66Jpc15UERLyOytLQFx6fbQfz3mJzzUVMHZkZdXah2ConBboMbW63zoWYx0o5IHPpEksodAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-31T13:46:52.920933Z","bundle_sha256":"a1fa6a7b07b88650ac2bfdf6a64c3c3efb9907347fd5e94d72ea0bca9318f2c5"}}